CVE-2020-26508

—

CVSS 3.1

9.8 critical

EPSS

1%p65

Published

Nov 16, 2020 (Nov 16, 2020)

Modified

Jun 17, 2026

Description

The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even though these are intentionally inaccessible in the UI.

Vendors: canon
Products: oce colorwave 3500 firmware
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.